Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
File: lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft (raw, json)
Hash identifier: 5NO3zIk0Poo87ujDlGLcOo0ixSYWtst7cPVlGDHWffo=
Subject key identifier: 5C:C8:24:79:FF:1C:0D:0C:C6:5E:C4:6C:45:52:C4:AD:73:22:39:EC
Authority key identifier: 94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
Certificate issuer: /CN=949ff40831ca66f996c76ea466af49476fecd1ff
Certificate serial: 0197B88FF6D81C29C6EDE717E69703E1B0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
Manifest number: 1394
Signing time: Sat 28 Jun 2025 22:02:11 +0000
Manifest this update: Sat 28 Jun 2025 22:02:11 +0000
Manifest next update: Sun 29 Jun 2025 22:02:11 +0000
Files and hashes: 1: 79fBoxetqM8W78-kGmHTvjPW7Uw.roa (hash: pMW1Mp2B+qXHZp51RoJRa8NJEQ1rG2VsgYraYBKPRXE=)
2: 8J0Lc2AsJQgnkJG9_qri1EHFctE.roa (hash: C4HlyCH6kbwI3fK9kG+XOoCsicg+/qe888AdIQka/S0=)
3: lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl (hash: S1MdADop9FVhF95/g7RSgMXTzXqFctNPljhzNT/7F1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f6:d8:1c:29:c6:ed:e7:17:e6:97:03:e1:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949ff40831ca66f996c76ea466af49476fecd1ff
Validity
Not Before: Jun 28 22:02:11 2025 GMT
Not After : Jun 29 22:02:11 2025 GMT
Subject: CN=5cc82479ff1c0d0cc65ec46c4552c4ad732239ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:02:20:b1:8e:f7:64:2f:98:c5:e7:f7:11:bf:
97:36:74:e3:ed:f8:6a:4b:b4:2a:15:29:36:b9:f5:
d0:c9:21:67:0a:c9:c1:86:7c:76:8b:a7:01:72:04:
34:65:3d:df:5b:21:f7:01:56:41:66:0a:6a:54:42:
e1:42:14:6c:33:f8:53:e7:52:87:db:41:84:9a:23:
e0:8e:c5:8f:9b:4b:80:dc:5c:15:5b:3a:93:1a:3d:
c1:4f:ef:71:fd:73:20:de:c3:b7:66:5a:13:49:aa:
0d:b6:6c:96:33:ed:6c:ab:ef:dd:0c:be:1f:09:6a:
1d:57:41:57:dd:8f:a0:c7:fd:af:37:00:a2:ed:12:
39:c0:0b:55:19:9b:3d:79:d4:c7:a9:9b:9e:51:70:
3b:6b:59:60:2c:80:d3:a4:2b:cb:df:54:05:ad:93:
58:8a:2f:9f:b1:92:1a:fc:b5:5e:b4:d9:3e:1c:3b:
df:16:17:dd:b7:db:f3:fc:6d:1e:b7:71:b9:48:c0:
57:f6:0d:9f:db:6e:11:03:aa:37:44:43:53:15:ed:
cc:6c:32:bc:6e:c2:92:47:bc:4d:e6:2c:f4:6f:8a:
c5:9b:15:0f:a2:80:b1:b5:32:84:c0:e5:7f:97:b5:
70:94:d3:dd:fa:c7:ba:b3:c2:f8:47:00:98:eb:bf:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C8:24:79:FF:1C:0D:0C:C6:5E:C4:6C:45:52:C4:AD:73:22:39:EC
X509v3 Authority Key Identifier:
keyid:94:9F:F4:08:31:CA:66:F9:96:C7:6E:A4:66:AF:49:47:6F:EC:D1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ_0CDHKZvmWx26kZq9JR2_s0f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d10d-b448-4b47-ba58-147adc90ca0f/1/lJ_0CDHKZvmWx26kZq9JR2_s0f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:05:1c:b4:9f:33:58:dc:8a:a2:76:87:d7:51:95:f8:e3:85:
75:43:a3:e3:1f:82:84:7c:04:cb:81:3f:f2:62:0b:be:93:74:
d9:76:8d:20:ce:56:3e:eb:4a:96:1d:bf:64:cb:29:a8:ad:7a:
df:97:33:d7:3b:1f:60:f6:08:30:93:53:89:35:63:f5:1d:9b:
e6:9b:e8:96:c6:e5:9b:1f:b3:66:f9:65:e0:4c:c1:14:0b:fa:
2c:75:89:91:49:22:df:bc:f2:19:cc:8f:bf:44:33:68:8e:e0:
0a:1f:b3:d1:83:b8:98:fc:be:a1:1a:a5:e0:b9:ed:32:91:96:
1b:0e:36:70:28:42:ba:24:ec:86:45:54:8b:a8:ca:9c:b7:e2:
04:7f:37:36:d8:ae:ad:15:2d:bd:7a:63:a7:ac:11:34:3b:51:
fd:7b:ff:2b:e3:20:bb:cb:bf:9f:91:46:d1:3c:9b:43:75:dc:
15:ee:bc:60:67:54:60:e6:2b:92:bf:3d:b5:c6:85:a1:84:8d:
4e:48:12:1c:b0:f3:1f:e0:f3:42:46:02:70:38:87:b5:6e:18:
13:ab:41:af:e3:30:9a:49:cb:43:98:54:db:84:64:8b:e1:9d:
ee:34:14:e1:43:d6:34:85:81:c4:96:ea:37:ec:9a:5b:5d:cb:
30:dd:7b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:42 2025 by rpki-client